Privacy Policy - Man With Van Nottinghill

This Privacy Policy explains how Man With Van Nottinghill collects, uses, stores, shares, and protects personal data. It applies to all Man With Van Nottinghill customers in the area, including individuals, households, and business clients who request or receive moving, van hire, removal, packing, storage, or related services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, you acknowledge that we may process personal data as described in this policy. We only collect information that is necessary for service delivery, customer support, safety, administration, legal compliance, and business operations.

1. Information We Collect

We may collect personal data directly from you, from your representatives, or from third parties involved in arranging or delivering a service. The categories of data we collect may include:

Identity details such as name and title.
Contact information such as phone number, email address, and service address.
Service information including move dates, collection and delivery locations, access details, inventory notes, and special handling instructions.
Payment and billing information such as invoicing details, payment status, and transaction records.
Communication records including emails, messages, call notes, complaints, and customer service correspondence.
Technical data such as basic website or device information where it is collected through cookies or similar technologies, if applicable.
Operational and security data such as vehicle logs, incident reports, damage reports, and records needed to manage service quality and safety.

We do not seek to collect more information than is necessary. Where we receive sensitive personal data, we only process it when there is a lawful basis and when it is required for a specific purpose, such as meeting access needs or accommodating particular service requests.

2. How We Use Personal Data

We use personal data to provide and manage moving and van services, respond to enquiries, prepare quotations, schedule jobs, carry out transport arrangements, issue invoices, maintain records, and resolve disputes. We may also use data to improve our operations, train staff, protect against fraud, maintain safety, and comply with legal obligations.

Typical uses include:

Confirming bookings and service requirements.
Planning routes, loading, unloading, and delivery arrangements.
Communicating updates about timings or service issues.
Handling payments, refunds, and account administration.
Maintaining internal records and audit trails.
Managing claims, complaints, and customer support requests.
Protecting staff, customers, and property.

We only use personal data for purposes that are compatible with the reason it was collected.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis before processing personal data. Depending on the activity, we rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, scheduling services, moving items, managing payments, and fulfilling agreed service obligations.

Legal Obligation

We may process data to meet legal and regulatory requirements, including tax, accounting, insurance, transport, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service improvement, fraud prevention, operational management, customer relationship management, and internal administration. We apply a balancing test before relying on this basis.

Consent

In limited cases, we may rely on your consent, such as for certain marketing communications or optional data uses. When we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Vital Interests and Public Task

These bases are unlikely to apply in ordinary service delivery, but we may process data if necessary to protect someone’s vital interests or where a legal public function requires it.

4. Sharing and Processors

We may share personal data with trusted third parties and service providers who act as processors or, in some cases, independent controllers. We only share data when necessary and under appropriate contractual and security safeguards.

Processors may include:

Payment providers that handle transactions securely.
Accounting and bookkeeping providers that support invoicing and financial record management.
IT, hosting, and software providers that store or process data systems used to run our operations.
Communication service providers used for email, messaging, scheduling, or customer support.
Professional advisers such as legal, insurance, or audit advisers where necessary.
Subcontractors or operational partners involved in service delivery, where applicable.

Where a third party processes data on our behalf, we require them to:

use the data only for the agreed purpose;
keep the data secure;
retain it only as instructed;
support compliance with data protection law.

We may also disclose data where required by law, court order, regulatory request, or to protect our rights, property, staff, or customers. We do not sell personal data.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including any legal, accounting, tax, insurance, or dispute-resolution requirements. The retention period depends on the type of data and why it is held.

In general:

service and customer records are kept for the duration needed to complete the job and manage follow-up matters;
financial and invoice records may be kept for the period required by tax and accounting law;
complaints, claims, and incident records may be retained until the matter is fully resolved and for a reasonable period afterwards;
data collected with consent is retained until consent is withdrawn or the data is no longer needed.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. We regularly review retention needs to avoid keeping data longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and routine review of internal procedures.

No system is completely secure, but we take data protection seriously and work to reduce risk. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will handle it in line with our legal obligations.

7. International Transfers

If personal data is transferred outside the UK, we will only do so where adequate safeguards are in place. This may include an adequacy decision or approved contractual protections. We take steps to ensure that international transfers remain compliant with applicable data protection law.

8. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These rights may be subject to conditions, exemptions, or limitations depending on the circumstances.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can ask us to delete data in certain situations.
Right to restriction – you can request limited processing in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request your data in a portable format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data. We encourage you to contact us first so we can attempt to resolve any concern promptly and fairly.

9. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary for a service arrangement and provided by a parent, guardian, or authorised representative. If we become aware that we have collected data improperly, we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, operations, or service practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

11. Summary of Our Commitment

Man With Van Nottinghill is committed to respecting privacy, minimising data collection, processing personal data only where lawful, and safeguarding the information entrusted to us. We handle customer data with care, limit access to authorised personnel and trusted processors, and retain information only for as long as needed for legitimate business and legal purposes.

This Privacy Policy applies to all Man With Van Nottinghill customers in the area and forms part of our commitment to transparent and responsible data protection practices.